Security Operations Integration - Block Request capability

Security Operations Integration - Block Request capability

Security Operations Integration - Block Request capability

The Block Action capability blocks observables associated with a
security incident on a firewall, web proxy, or other control point using implementation workflows.
This capability is used during incident response investigations to contain an identified
threat.

The Security Operations Integration - Block Request workflow is a high-level workflow independent of integrations. It blocks observables associated with a security incident. Use it to fulfill an integration such as Palo Alto Networks - Firewall.